CVE-2025-61750

MediumCVSS 4.3

Published: 21/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

19th percentile - higher than 19% of all known CVEs

Summary

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Query) affecting versions 8.61 and 8.62. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools, resulting in unauthorized read access to a subset of accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts).

Risk Assessment

An attacker with low privileges can access data they should not have access to, potentially leading to information disclosure. The impact is limited to confidentiality.

Recommendation

Apply the available Oracle patches for PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62. Restrict network access to the Query component to trusted users and monitor for unusual queries.

Other vulnerabilities in Oracle PeopleSoft Enterprise PeopleTools

CVE-2025-53050High
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Performance Monitor). Affected versions are 8.60, 8.61, and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 7.5 (Availability impacts).

Original NVD description (English source)

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS